From e5a0001ee8e96060494b562f0467ba48ee9b5e96 Mon Sep 17 00:00:00 2001
From: Yoshani <yoshani.malinka@gmail.com>
Date: Tue, 25 Jul 2023 07:51:13 +0530
Subject: [PATCH] add config for request uri expiry time

---
 .../resources/identity.xml                                | 8 ++++++++
 .../resources/identity.xml.j2                             | 8 ++++++++
 ....carbon.identity.core.server.feature.unit-resolve.json | 1 +
 3 files changed, 17 insertions(+)

diff --git a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml
index 1b70ba037f60..caec17d081e1 100644
--- a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml
+++ b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml
@@ -582,6 +582,14 @@
             <KeySet>BCDFGHJKLMNPQRSTVWXYZbcdfghjklmnpqrstvwxyz23456789</KeySet>
         </DeviceCodeGrant>
 
+        <!--
+            Configs related to OAuth2 Pushed Authorization Requests.
+            Supported versions: IS 6.2.0 onwards
+        -->
+        <PAR>
+            <ExpiryTime>60</ExpiryTime>
+        </PAR>
+
         <!-- Configs related to OAuth2 token persistence -->
         <TokenPersistence>
             <Enable>true</Enable>
diff --git a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml.j2 b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml.j2
index 6ac10a6a7106..881619bfa8cd 100644
--- a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml.j2
+++ b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml.j2
@@ -827,6 +827,14 @@
           <KeySet>{{oauth.grant_type.device_code.key_set}}</KeySet>
         </DeviceCodeGrant>
 
+        <!--
+            Configs related to OAuth2 Pushed Authorization Requests.
+            Supported versions: IS 6.2.0 onwards
+        -->
+        <PAR>
+            <ExpiryTime>{{oauth.par.expiry_time}}</ExpiryTime>
+        </PAR>
+
         <!--
             Config related to display name in Authorization Code Grant consent page.
             Default value : false
diff --git a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/org.wso2.carbon.identity.core.server.feature.unit-resolve.json b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/org.wso2.carbon.identity.core.server.feature.unit-resolve.json
index c950f7ab2b65..b436a78b6985 100644
--- a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/org.wso2.carbon.identity.core.server.feature.unit-resolve.json
+++ b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/org.wso2.carbon.identity.core.server.feature.unit-resolve.json
@@ -78,6 +78,7 @@
     "oauth.token.validation.validation_response_jwt_validity": "m",
     "oauth.grant_type.device_code.expiry_time": "ms",
     "oauth.grant_type.device_code.polling_interval": "ms",
+    "oauth.par.expiry_time": "s",
 
     "authentication.adaptive.http_connections.default_timeout": "ms",
     "authentication.adaptive.http_connections.connection_timeout": "ms",